Skip to content

Personal Data Protection Disclosure (KVKK)

Son güncelleme: April 25, 2026

In accordance with Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), this disclosure statement has been prepared by Dayivo to inform you about the processing of our users' personal data.

1. Identity of the Data Controller

2. Which Personal Data Do We Process?

2.1 Identity Information

  • Name, nickname (provided by the user)
  • Email address
  • User ID (assigned automatically by the system)

2.2 Contact Information

  • Email address
  • Content of messages you send via the contact form

2.3 Customer Transaction Information

  • Subscription status (free / premium)
  • Purchase history (via RevenueCat)
  • Billing information (managed by Apple / Google)

2.4 Transaction Security Information

  • IP address
  • Device model and operating system
  • Session information (kept securely protected)
  • Security-related logs

2.5 In-App Data

Your expense records, habits, water intake and notes stay on your device by default. If you enable the cloud backup feature, they are stored on our server in an unreadable and protected form.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes, in line with the legal grounds set out in Articles 5 and 6 of the KVKK:

  • Service delivery (account creation, sign-in, synchronization)
  • Providing customer support
  • Improving service quality (based on anonymized data)
  • Fulfilling legal obligations
  • Taking security measures
  • Carrying out payment transactions (for Premium)
  • Fulfilling contractual obligations

4. Legal Grounds for Processing

Your personal data is processed based on the following legal grounds:

  • KVKK Art. 5/2-a: Being expressly provided for by law
  • KVKK Art. 5/2-c: Establishment and performance of a contract
  • KVKK Art. 5/2-ç: Fulfillment of legal obligations
  • KVKK Art. 5/2-e: Processing being mandatory for the establishment, exercise or protection of a right
  • KVKK Art. 5/2-f: Legitimate interest
  • KVKK Art. 5/1: Explicit consent (for marketing communications — not requested)

5. Transfer of Personal Data

5.1 Domestic Transfer

  • Legally authorized authorities: Upon a court order or official request
  • Our technology infrastructure provider: OVHcloud Turkey (server hosting)

5.2 International Transfer

  • RevenueCat (USA): For subscription management — explicit consent is obtained
  • Google (Play Store): For payments and app distribution

International transfers are carried out with your explicit consent under KVKK Art. 9/1.

6. Retention Period of Personal Data

Data Category Retention Period Legal Basis
Account data As long as the account is active + 30 days Contractual obligation
App data (on device) Until you delete it User control
Cloud backup Premium period + 30 days Contractual obligation
Log records 12 months Turkish Law No. 5651
Invoice records 10 years Turkish Tax Procedure Law
Contact form messages 24 months Legitimate interest

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the following rights:

  • To learn whether your personal data is being processed
  • To request information if your personal data has been processed
  • To learn the purpose of processing your personal data and whether it is used in accordance with that purpose
  • To know the third parties to whom personal data is transferred, domestically or abroad
  • To request correction of your personal data if it has been processed incompletely or incorrectly
  • To request its deletion or destruction (right to be forgotten)
  • To object to a result that arises against you, occurring through the analysis of processed data exclusively by automated systems
  • To request compensation for damages incurred due to unlawful processing of your data

8. Application Method

To exercise the rights listed above:

  1. By email: Apply to privacy@dayivo.com with the following information:
    • Full name
    • Your registered email address
    • Details of your request
    • A document confirming your identity (a copy of your driver's license / ID — with numbers redacted)
  2. From within the app: Settings → Account → "Request my data" / "Delete my account"

Your application is concluded free of charge within 30 days. If the process also entails a cost, the tariffs set by the Personal Data Protection Board may apply.

9. Complaint to the Personal Data Protection Board

If your application is rejected or found insufficient, you have the right to file a complaint with the Personal Data Protection Board within 30 days under KVKK Art. 14.

Board contact: kvkk.gov.tr

10. Current Policy

When this disclosure statement is updated, a notification is sent to your registered email address and published on our website. The current version is always available at dayivo.com/kvkk.